$ rpki-client -vvf rpki.apnic.net/member_repository/A91CDEB3/5D735D4696DE11E7BA7D2A77C4F9AE02/k524p4YADCa65IN7bs2uD4q60bA.mft File: k524p4YADCa65IN7bs2uD4q60bA.mft (raw, json) Hash identifier: Uvc3y3y/tMBftcAiDBreF8Wcx1CnevNPAjDoScoWCpY= Subject key identifier: 61:C7:FF:4D:A0:C4:11:D7:D7:20:FA:E0:13:8F:67:27:A9:09:8F:C8 Authority key identifier: 93:9D:B8:A7:86:00:0C:26:BA:E4:83:7B:6E:CD:AE:0F:8A:BA:D1:B0 Certificate issuer: /CN=A91CDEB3/serialNumber=939DB8A786000C26BAE4837B6ECDAE0F8ABAD1B0 Certificate serial: 18C0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k524p4YADCa65IN7bs2uD4q60bA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CDEB3/5D735D4696DE11E7BA7D2A77C4F9AE02/k524p4YADCa65IN7bs2uD4q60bA.mft Manifest number: 18A2 Signing time: Thu 24 Apr 2025 16:30:46 +0000 Manifest this update: Thu 24 Apr 2025 16:30:46 +0000 Manifest next update: Thu 01 May 2025 16:30:46 +0000 Files and hashes: 1: k524p4YADCa65IN7bs2uD4q60bA.crl (hash: fCo/l3+t/q6AuQF4G2viqx8+vKBIk1kvWaraNGgc/F4=) 2: 5705E30EFC7A11E8BFCC760AC4F9AE02.roa (hash: dkIdUkxS0d2PbrqHHzMK0XKv4nvJXGsXU3jrSo/hWKk=) 3: A6ACA298858911E88026B416C4F9AE02.roa (hash: Bm6Hg3gh1j1a80wR2XX7xwyi1WY27Wumi8LE07BcSR8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CDEB3/5D735D4696DE11E7BA7D2A77C4F9AE02/k524p4YADCa65IN7bs2uD4q60bA.crl rsync://rpki.apnic.net/member_repository/A91CDEB3/5D735D4696DE11E7BA7D2A77C4F9AE02/k524p4YADCa65IN7bs2uD4q60bA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k524p4YADCa65IN7bs2uD4q60bA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 16:30:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6336 (0x18c0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CDEB3, serialNumber=939DB8A786000C26BAE4837B6ECDAE0F8ABAD1B0 Validity Not Before: Apr 24 16:30:46 2025 GMT Not After : May 1 16:30:46 2025 GMT Subject: CN=680a6736-8de2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:44:d1:78:79:96:9b:f8:6c:56:81:87:25:be: c7:73:9f:3e:25:6e:75:b1:70:43:70:ac:f2:55:40: ba:a6:cd:b8:ca:3f:16:c5:43:c0:44:6a:a4:52:ff: a5:2f:f3:cc:02:c6:fb:b3:cb:71:11:d4:e1:dd:10: ee:02:3f:47:b9:02:57:b2:42:6e:c7:57:29:d5:bd: 02:54:14:0e:73:11:21:71:9b:4a:46:c5:ab:07:96: 0a:bb:47:8c:db:7a:fd:a5:4c:e4:c6:e2:65:08:be: f5:dc:83:f7:50:c0:1b:60:7e:1c:e1:5a:07:84:46: c8:2b:d4:fe:88:52:7f:67:1a:42:8f:16:43:fe:0c: 92:a2:6e:61:e1:f8:80:a0:bd:58:4c:10:e9:0a:07: 4e:12:2e:3d:d0:19:72:9e:5c:a4:38:11:06:39:cc: 27:ee:17:6f:df:6f:e0:75:6d:ae:66:1f:f6:5e:9f: a3:e9:17:68:33:6d:4b:c3:87:9b:49:2f:f6:87:19: a1:a1:d7:2d:11:5e:4e:01:de:18:a9:49:d3:09:41: ea:f3:b2:f6:20:a4:6e:4e:08:b0:93:59:49:86:b7: 42:8c:f5:fb:88:1b:f4:c0:4f:5b:9f:c7:62:76:96: 7f:fe:2e:1d:8c:cf:47:21:a9:e0:d9:11:11:88:fb: 3f:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:C7:FF:4D:A0:C4:11:D7:D7:20:FA:E0:13:8F:67:27:A9:09:8F:C8 X509v3 Authority Key Identifier: keyid:93:9D:B8:A7:86:00:0C:26:BA:E4:83:7B:6E:CD:AE:0F:8A:BA:D1:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CDEB3/5D735D4696DE11E7BA7D2A77C4F9AE02/k524p4YADCa65IN7bs2uD4q60bA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k524p4YADCa65IN7bs2uD4q60bA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CDEB3/5D735D4696DE11E7BA7D2A77C4F9AE02/k524p4YADCa65IN7bs2uD4q60bA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:89:b9:ed:e2:ef:64:47:75:85:90:95:96:d9:fe:5e:ae:50: 29:1a:37:69:ae:1a:73:8a:07:fd:de:b1:b9:19:45:f1:10:22: 23:35:58:7a:a4:46:aa:10:ab:94:2b:9a:5e:56:01:9c:2b:27: 93:50:eb:3a:62:dc:dc:14:4c:94:56:6f:87:b2:7c:62:4d:e5: 37:7a:08:6e:39:66:18:59:1b:c1:cd:bf:eb:c5:16:10:66:ee: 9e:98:20:c2:98:22:4e:c9:4c:b9:3c:36:91:b2:37:fe:2d:9f: ca:bc:b1:58:db:5d:41:e0:55:32:91:5e:87:ae:29:ec:dd:d2: f6:b7:60:cd:91:86:56:22:c4:0c:3e:a5:54:38:c9:30:97:9f: cc:bd:0a:fe:cd:f3:69:1f:4d:8c:89:55:74:73:1a:af:6d:11: 25:6b:05:76:62:7b:76:36:f1:6e:46:ef:96:15:96:b6:85:a1: d5:b3:3e:3d:6c:68:70:56:b4:e4:7f:18:52:27:28:07:7d:2a: cc:0a:8d:dd:4f:3e:d8:b7:61:7b:47:ad:cb:e2:8e:32:2f:43: f6:d5:3a:88:b0:a1:17:df:c0:65:58:b6:13:b3:fd:45:af:26: 9d:82:63:4d:33:b8:ab:c4:48:12:60:cc:b1:16:35:4f:3d:bb: ca:aa:2e:c6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGMAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0RFQjMxMTAvBgNVBAUTKDkzOURCOEE3ODYwMDBDMjZCQUU0ODM3QjZFQ0RBRTBG OEFCQUQxQjAwHhcNMjUwNDI0MTYzMDQ2WhcNMjUwNTAxMTYzMDQ2WjAYMRYwFAYD VQQDEw02ODBhNjczNi04ZGUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApkTReHmWm/hsVoGHJb7Hc58+JW51sXBDcKzyVUC6ps24yj8WxUPARGqkUv+l L/PMAsb7s8txEdTh3RDuAj9HuQJXskJux1cp1b0CVBQOcxEhcZtKRsWrB5YKu0eM 23r9pUzkxuJlCL713IP3UMAbYH4c4VoHhEbIK9T+iFJ/ZxpCjxZD/gySom5h4fiA oL1YTBDpCgdOEi490BlynlykOBEGOcwn7hdv32/gdW2uZh/2Xp+j6RdoM21Lw4eb SS/2hxmhodctEV5OAd4YqUnTCUHq87L2IKRuTgiwk1lJhrdCjPX7iBv0wE9bn8di dpZ//i4djM9HIang2RERiPs/SwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGHH/02g xBHX1yD64BOPZyepCY/IMB8GA1UdIwQYMBaAFJOduKeGAAwmuuSDe27Nrg+KutGw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDREVCMy81RDczNUQ0Njk2 REUxMUU3QkE3RDJBNzdDNEY5QUUwMi9rNTI0cDRZQURDYTY1SU43YnMydUQ0cTYw YkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2s1MjRwNFlBRENhNjVJTjdiczJ1RDRxNjBiQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD REVCMy81RDczNUQ0Njk2REUxMUU3QkE3RDJBNzdDNEY5QUUwMi9rNTI0cDRZQURD YTY1SU43YnMydUQ0cTYwYkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAVibnt4u9kR3WFkJWW2f5erlApGjdprhpzigf93rG5GUXxECIjNVh6 pEaqEKuUK5peVgGcKyeTUOs6YtzcFEyUVm+HsnxiTeU3eghuOWYYWRvBzb/rxRYQ Zu6emCDCmCJOyUy5PDaRsjf+LZ/KvLFY211B4FUykV6Hrins3dL2t2DNkYZWIsQM PqVUOMkwl5/MvQr+zfNpH02MiVV0cxqvbRElawV2Ynt2NvFuRu+WFZa2haHVsz49 bGhwVrTkfxhSJygHfSrMCo3dTz7Yt2F7R63L4o4yL0P21TqIsKEX38BlWLYTs/1F ryadgmNNM7irxEgSYMyxFjVPPbvKqi7G -----END CERTIFICATE-----Generated at Sat Apr 26 17:08:48 2025 by rpki-client